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Final Rejection 

Response to the applicant's Amendment 

1 . Applicant's arguments/amendments with respect to amended claims 1, 12, 19, and 26, 
and canceled claims 14 and 23 filed on October 4, 2001 have been fully considered but they are 
not persuasive. 

a. Regarding claims 12-13 and 15, arguments/amendment are not persuasive. The 
examiner would like to point out that this action is made final (MPEP 706.07). 

b. Regarding claims 1-11, 14, and 16-26, applicant's arguments/amendments are 
moot in view of the new ground(s) of rejection. 

2. The examiner accepts the amended drawings. 

Response to Arguments 

3. Applicant argues: 

a. Chopra fails to teach, anticipate, or suggest at least one of the 
distinguishing features of independent claim 12, namely, at least one processor executing 
a stored interactive software application inside a browser, the executed interactive 
software application and the browser being in communication with at least one element, 
wherein the at least one element is external to the browser and includes a component of 
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an underlying architecture of the client computing system (page 5 par. 3, 5, and page 6 
par. 1). 

b. Dependent claims 13 and 15 are allowable based upon their dependency 
on allowable claim 12 (page 6 par. 2). 

c. Chopra and Brownell fails to teach, suggest, or render obvious at least one 
of the distinguishing features of independent claim 19, namely, communicating data 
between at least one element and a browser and wherein the at least one element is 
external to the browser and includes a component of an underlying architecture of a client 
computing system (page 7 par. 4). 

d. Dependent claims 20-22 and 24-25 are allowable based upon their 
dependency on allowable claim 19 (page 8 par. 2). 

However examiner disagrees with applicant. 

Regarding argument (a), Chopra teaches a user device executing a stored 
interactive software application inside a browser (Chopra page 2 par. 0019), the executed 
interactive software application and the browser being in communication with at least 
one element, wherein the at least one element is external to the browser and includes a 
component of an underlying architecture of the client computing system (Chopra page 2 
par. 0019, and page 3 par. 0024). 

Regarding argument (b), examiner disagrees with applicant. Based on the 
arguments forth by the examiner for argument (a), the dependent claims stand as rejected. 
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Regarding argument (c), Chopra teaches communicating data between at least one 
element and a browser and wherein the at least one element is external to the browser and 
includes a component of an underlying architecture of a client computing system (Chopra 
page 2 par. 0019, and page 3 par. 0024). 

Regarding argument (d), examiner disagrees with applicant. Based on the 
arguments forth by the examiner for argument (a), (b), and (c) 3 the dependent claims 
stand as rejected. 

Rejections 

4, The text of those sections of Title 35, U.S. Code not included in this action can be found 
in a prior Office action. 

Claim Rejections - 35 USC § 102 

5. Claims 12, 13, and 15 are rejected under 35 U.S.C. 102(e) as being anticipated by Chopra 
(Pub. No. : US 2002/0 1 28920 Al ). 

As per claim 12, Chopra teaches a system for providing security to a client computing system 
operating a browser in communication with an interactive software application maintained by a 
host computing system, said system comprising: 

at least one processor in the client computing system operable to generate and 
communicate a request to download the interactive software application from the host computing 
system to the client computing system (Chopra page 1 par. 0007); 
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a memory operating in the client computing system to store the interactive software 
application downloaded in response to the download request, said at least one processor 
executing the stored interactive software application and the browser, the executed interactive 
software application and the browser being in communication with at least one element(Chopra 
page 2 par. 0019, and page 3 par. 0024); and 

wherein the at least one element is external to the browser and includes a component of 
an underlying architecture of the client computing system (Chopra page 3 par. 0024). 

As per claim 13 Chopra teaches the method/system, wherein the communication includes issuing 
and receiving events (Chopra page 1 par. 0007). 

As per claim 15 Chopra teaches the method/system, wherein the interactive software application 
is a Java applet (Chopra page 6 claim 36). 

Claim Rejections - 35 USC § 103 

6. Claims 16-22, and 24-25 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Chopra (Pub. No.: US 2002/0128920 Al) in view of Brownell (Pub. No.: US 2002/0169980 Al). 

As per claim 19 Chopra teaches a method for providing security to a client computing system 
operating an interactive software application, said method comprising: 

loading the interactive software application on the client computing system (Chopra page 
3 par. 0024); 
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executing the interactive software application in a browser on the client computing 
system (Chopra page 1 par. [0006-0007], and page 3 par. 0024); 

communicating data between the at least one element and browser (Chopra page 2 par. 
0019, and page 3 par. 0024); and 

wherein the at least one element is external to the browser and includes a component of 
an underlying architecture of the client computing system (Chopra page 3 par. 0024). 

Chopra does not disclose communicating a digital signature to the browser; 
verifying the digital signature; 

upon confirmation of the digital signature, opening a port of the browser for receiving 
data from at least one element; 

However Brown teaches communicating a digital signature to the browser (Brownell 
page 6 par. 0072 and page 4 par. [0050-0054]); 

verifying the digital signature (Brownell page 6 par. 0075 and page 4 par. [0050-0054]); 

upon confirmation of the digital signature, opening a port of the browser for receiving 
data from at least one element (Brownell page 6 par. 0072 and page 4 par. [0050-0054]); 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Brownell within the system of Chopra 
because it would allow to authenticate and verify a user to further improve security (Brownell 
page 6 par. 0072). 
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As per claims 16 and 22 both Chopra and Brownell teach all the subject matter as described 
above. In addition Brownell teaches the method/system, wherein the communication commences 
after verification of a digital signature, digital signature associated with the host (Brownell page 
6 par. 0072 & 0075). The rational for combining are the same as claim 19 above. 

As per claim 17 both Chopra and Brownell teach all the subject matter as described above. In 
addition, the both teach the method/system, wherein the data includes a model representative of 
an underlying architecture of a software system (Chopra page 3 par. 0024, and Brownell page 4 
par. 0050). 

As per claim 1 8, and 25, both Chopra and Brownell teach all the subject matter as described 
above. In addition, both teach the method/system, wherein the browser is a web browser (Chopra 
page 2 par. 0019, and Brownell page 4 par. 0050). 

As per claim 20, both Chopra and Brownell teach all the subject matter as described above. In 
addition Chopra teaches the method, wherein the data includes at least one of events and requests 
(Chopra page 1 par. [0006-0007]). 

As per claim 21, both Chopra and Brownell teach all the subject matter as described above. In 
addition Chopra teaches the method, wherein the events and requests utilize the HTTP protocol 
(Chopra page 2 par. 0019). 
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As per claim 24, both Chopra and Brownell teach all the subject matter as described above. In 
addition Brownell teaches the method, wherein the at least one element operates on the client 
side of a client firewall (Brownell page 5 par. 0056). The rational for combining is the same as 
claim 19 above. 

7. Claims 1-11 and 26 are rejected under 35 U.S.C 103(a) as being unpatentable over 
Chopra (Pub. No.: US 2002/0128920 Al) in view of Thackston (Pub. No.: US 2002/0035450 
Al). 

As per claims 1 and 26 Chopra teaches a method for providing security to a client computing 
system in communication with a host communication system across a network, said method 
comprising: 

executing a browser on the client computing system (Chopra page 2 par. 0019); 

communicating from the client to the host computing system (Chopra Fig. 1 No. 102 & 
106), a request to download data to be displayed in the browser (Chopra page 1 par. 0007); 

downloading the data from the host computing system to the client 
computing system (Chopra page 3 par. 0024); 

loading an interactive software application in the browser, the interactive 
software application utilizing the data downloaded from the host computing system (Chopra 
page 3 par. 0024); and 
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executing the interactive software application in the browser on the client computing 
system, the interactive software application being in communication with at least one element 
outside the browser on the client side (Chopra page 2 par. 0019, and page 3 par. 0024); 

Chopra does not explicitly teach client side firewall. 

However Thackston discloses client side firewall (Thackston page 3 par. 0029). 
Therefore it would have been obvious to one having ordinary skill in the art at the time the 
invention was made to employ the teachings of Thackston within the system of Chopra because 
it would allow to provide security so as to protect proprietary and sensitive data (Thackston page 
3 par. 0029). 

As per claim 2, Chopra, and Thackston teach all the subject matter as described above. In 
addition Chopra teaches the method/system, wherein the communication includes issuing and 
receiving events (Chopra page 1 par. 0007). 

As per claim 3 Chopra, and Thackston teach all the subject matter as described above. In 
addition, teaches the method/system, wherein the at least one element includes at least one of a 
browser and an element of an underlying architecture (Chopra page 2 par. 0019). 

As per claims 4, and 5 Chopra, and Thackston teach all the subject matter as described above. In 
addition Chopra teaches the method/system, wherein the interactive software application is a 
Java applet (Chopra page 6 claim 36). 
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As per claims 6, Chopra, and Thackston teach all the subject matter as described above. In 
addition Thackston teaches the method/system, wherein the communication commences after 
verification of a digital signature, digital signature associated with the host (Thackston page 9 
par. 0101). 

As per claim 7 Chopra, and Thackston teach all the subject matter as described above. In 

addition Thackston teaches the method/system, further comprising: 
reading a digital signature (Thackston page 9 par. 0101); 
verifying the digital signature (Thackston page 9 par. 0101); and 
opening a port of the browser to receive events from the at least one element (Thackston 

page 5 par. 0068). 

As per claim 8 Chopra, and Thackston teach all the subject matter as described above. In 
addition, Chopra teaches the method/system, wherein the data includes a model representative of 
an underlying architecture of a software system (Chopra page 3 par. 0024). 

As per claim 9, Chopra, and Thackston teach all the subject matter as described above. In 
addition Chopra teaches the method, wherein the browser operates a graphical user interface to 
display data communicated by the at least one element (Chopra page 2 par. 0017). 
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As per claim 10, Chopra, and Thackston teach all the subject matter as described above. In 
addition Chopra teaches the method, wherein the data includes content and format information 
(Chopra page 3 par 0024). 

As per claim 11, Chopra, and Thackston teach all the subject matter as described above. In 
addition, Copra teaches the method/system, wherein the browser is a web browser (Chopra page 
2 par. 0019). 

8. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 
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9. 



Any inquiry concerning this communication or earlier communications from the 



examiner should be directed to Eleni A. Shiferaw whose telephone number is 571-272-3867. 
The examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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